Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208884.roa
File:                     AS208884.roa (raw, json)
Hash identifier:          HYipcD3UzR9oVM5FtGbXXITSukv/JxNMDDkulWyjqKQ=
Subject key identifier:   FE:6A:23:75:B9:59:85:AA:A5:F8:68:18:84:1C:1C:2B:D7:19:2E:C7
Certificate issuer:       /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
Certificate serial:       29F601A880CC365DB57F535D678960C4AE0CF485
Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208884.roa
Signing time:             Mon 30 Jun 2025 14:59:52 +0000
ROA not before:           Mon 30 Jun 2025 14:54:52 +0000
ROA not after:            Mon 29 Jun 2026 14:59:52 +0000
asID:                     208884
IP address blocks:        2a05:dfc3:f600::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f6:01:a8:80:cc:36:5d:b5:7f:53:5d:67:89:60:c4:ae:0c:f4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36
        Validity
            Not Before: Jun 30 14:54:52 2025 GMT
            Not After : Jun 29 14:59:52 2026 GMT
        Subject: CN=FE6A2375B95985AAA5F86818841C1C2BD7192EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:a7:5f:96:8a:52:42:33:7a:b7:9d:54:88:
                    f3:c2:74:18:0d:58:3b:09:9f:7b:7a:72:62:55:8e:
                    57:a1:c4:a3:89:e0:5c:cc:ad:0f:80:90:e7:27:54:
                    09:17:6f:74:c7:0f:02:a7:3c:9c:a7:25:33:bc:8a:
                    9d:e2:13:7f:70:79:b7:5a:13:a9:22:6f:33:4b:24:
                    76:a1:c7:49:4a:99:7f:d5:55:fb:38:06:f7:63:32:
                    51:9f:bb:ea:8c:c9:52:0d:63:32:8f:3d:eb:76:84:
                    c4:69:c9:a2:93:ba:8b:11:6d:6b:12:d9:7d:bd:bc:
                    50:56:79:2b:38:b3:90:e6:8e:9d:aa:78:7d:6c:fe:
                    72:52:98:84:10:02:03:e2:a6:80:db:c9:0a:81:75:
                    73:ee:10:a6:c9:df:2b:86:3f:e8:ea:56:ea:90:b4:
                    e3:cd:d6:15:b3:7c:b3:81:ff:d6:19:19:72:b1:a6:
                    22:86:1a:51:ca:ff:8b:90:fa:49:79:26:01:fe:d3:
                    25:0d:d8:d7:9d:c6:d7:ab:1c:14:05:16:e9:f1:29:
                    36:1b:aa:40:d8:12:8b:8e:20:7e:23:12:a1:43:5f:
                    70:f8:e6:cb:9b:f9:78:8c:8e:dd:3c:ad:2e:32:76:
                    60:63:f3:3b:3e:69:09:e4:52:79:21:b6:e4:48:15:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6A:23:75:B9:59:85:AA:A5:F8:68:18:84:1C:1C:2B:D7:19:2E:C7
            X509v3 Authority Key Identifier:
                keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/AS208884.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:b8:8b:d9:ca:1e:f2:a6:56:3b:58:3f:64:39:98:b9:34:
         3d:e9:60:7f:62:0d:a6:b8:95:6c:09:f5:6b:4f:3e:cd:b3:5d:
         3f:e5:a5:6e:f5:1e:09:80:88:37:85:e9:5b:bf:ac:dd:2b:67:
         fb:03:41:40:f5:69:29:08:e2:d0:10:48:eb:25:8d:fa:54:fe:
         f8:76:1e:40:75:9a:49:3f:32:d6:bd:15:75:d1:b0:09:11:30:
         a7:47:62:4f:09:f6:7a:99:db:d1:34:cb:d5:bf:da:14:a0:44:
         18:e3:59:ef:91:ab:9d:d1:00:f1:26:ba:ca:f9:24:22:4e:d0:
         00:78:75:00:35:d9:5c:e4:11:2e:c0:5e:9f:72:74:88:aa:de:
         f5:73:20:79:0c:e3:56:a5:f9:32:4d:ab:67:e1:18:fe:34:32:
         dc:73:16:e3:56:cb:fc:ae:3e:f2:e0:08:f6:90:ae:a5:ad:72:
         9a:b8:e3:b4:59:94:2b:93:32:23:d1:5f:5a:94:15:30:17:20:
         94:94:2e:51:d0:a1:4d:05:c1:87:90:6b:a8:d5:82:d9:85:43:
         44:4b:ef:3c:33:bf:b4:29:b1:59:83:fd:2b:6c:38:76:5a:ed:
         fb:56:58:8c:4e:89:a8:50:04:e4:56:78:d5:55:aa:ec:40:90:
         f8:36:a9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----